BYO Wild card Certificate
When installing APL with DNS, there are 3 issuers
you can use:
- custom-ca
- letsencrypt
- byo-wildcard-cert
In most of the installation examples we use letsencrypt
. In this example we'll show how to use a Bring Your Own wildcard certificate.
To use a byo-wildcard-cert
, install APL with the following values:
cluster:
name: otomi
provider: custom
domainSuffix: try-otomi.net
otomi:
hasExternalDNS: true
dns:
domainFilters:
- try-otomi.net
provider:
aws:
credentials:
secretKey: xxx
accessKey: xxx
region: eu-central-1
apps:
cert-manager:
issuer: byo-wildcard-cert
# Add the full chain of your wild card certificate
byoWildcardCert: |
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
byoWildcardCertKey: |
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----